The control system must be able to specifically prohibit or restrict the use of functions, ports, protocols and services that are not needed. No enhancement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.